Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/rbYQ1Hw2fC0Q-Y2rIuCJItxMDXQ.roa
File:                     rbYQ1Hw2fC0Q-Y2rIuCJItxMDXQ.roa (raw, json)
Hash identifier:          97nBodVuwC+/2czTjHM2x4RVKhhNlypzRKD9KhG2t38=
Subject key identifier:   AD:B6:10:D4:7C:36:7C:2D:10:F9:8D:AB:22:E0:89:22:DC:4C:0D:74
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/rbYQ1Hw2fC0Q-Y2rIuCJItxMDXQ.roa
Signing time:             Thu 15 Sep 2022 02:43:56 +0000
ROA not before:           Thu 15 Sep 2022 02:43:56 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4780
IP address blocks:        2401:8000::/26 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:56 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=ADB610D47C367C2D10F98DAB22E08922DC4C0D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:fd:39:32:4b:4b:c9:28:88:4d:f0:57:84:
                    bb:76:f2:58:da:6b:fd:b6:a3:f7:31:a4:65:70:46:
                    60:50:76:79:13:b1:4c:27:90:09:7e:ca:75:f6:f8:
                    13:23:12:fb:f2:a5:21:ca:4d:50:16:88:33:1f:1c:
                    17:13:58:dc:a3:e4:62:c1:0b:b6:4b:72:d3:d6:2c:
                    68:45:20:58:8f:c4:ff:ca:dd:4c:42:25:78:92:43:
                    a4:eb:f2:56:0d:e3:08:72:47:a2:cc:16:01:49:74:
                    5e:53:25:03:fc:81:3a:08:90:8a:79:14:ff:ef:cb:
                    66:9d:26:6a:e3:c2:f3:e7:0f:95:bd:02:05:07:de:
                    7c:c5:29:76:db:fd:8a:a0:19:44:6d:03:1f:f5:6d:
                    9a:09:03:d1:29:70:00:b5:85:e8:ae:71:a5:d6:eb:
                    95:c0:21:33:c0:92:64:57:c3:bb:45:83:1a:01:d2:
                    09:a0:d6:b5:12:38:95:50:65:4a:30:fa:14:af:e9:
                    4a:4a:8b:4f:e4:5f:d4:89:ad:4f:0d:ae:fc:83:2f:
                    09:96:68:92:65:23:27:4d:25:8b:b6:63:1b:57:47:
                    54:d8:7d:88:30:3c:c3:03:17:1f:4f:8c:fb:bb:ae:
                    9a:89:e9:5a:f9:ee:f5:c6:6c:23:84:50:05:88:d5:
                    47:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B6:10:D4:7C:36:7C:2D:10:F9:8D:AB:22:E0:89:22:DC:4C:0D:74
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/rbYQ1Hw2fC0Q-Y2rIuCJItxMDXQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:8000::/26

    Signature Algorithm: sha256WithRSAEncryption
         c2:ff:d5:8c:a3:e4:9b:02:21:89:46:de:07:55:33:33:ad:6d:
         d2:1d:00:f6:d4:ae:c1:a3:47:d3:2f:67:ee:84:47:cd:1b:44:
         6b:9c:9a:21:22:ac:e7:39:7e:5b:15:07:75:0b:80:80:4b:80:
         79:56:78:55:05:4d:d9:d2:f1:47:74:09:cf:6b:fe:2e:29:c8:
         71:03:b0:84:2d:4e:17:01:72:66:5f:85:11:38:24:ee:ed:c3:
         91:18:b8:66:0d:b7:08:91:eb:e2:d4:c0:df:d2:e4:bc:7b:b7:
         73:1e:43:de:18:eb:36:79:60:2c:39:29:1d:af:e4:37:b7:f6:
         73:38:79:3b:cb:34:31:72:75:5f:f7:fb:2c:e7:8b:49:ca:7a:
         e1:7b:44:93:da:00:7f:98:f2:45:87:84:6f:d9:93:49:ba:36:
         4e:4c:4a:2f:b1:82:b5:50:7b:f6:bc:a0:6a:6e:22:31:f9:9b:
         85:99:31:e4:02:c7:0a:e9:2e:3f:0b:cb:5c:ef:9e:47:dd:b5:
         70:bb:9d:2c:f9:59:fc:4f:f8:6f:64:0f:87:85:c5:c4:ff:80:
         98:63:c2:0a:57:48:c3:1c:5c:95:92:ab:7d:60:f6:93:ae:a9:
         5d:ca:38:1f:ab:71:7e:6c:2e:6a:4d:bc:d9:3c:c7:cb:32:e7:
         26:6a:25:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----